Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8df59b5-30db-48bc-a38c-ab9a670daf3a.roa
File: c8df59b5-30db-48bc-a38c-ab9a670daf3a.roa (raw, json)
Hash identifier: s+K0qUa7Vb5fo2oLBC4fBTyryVqpsG+4JqWjcjM93y0=
Subject key identifier: 1C:A5:F6:31:78:2C:8F:4F:EF:3A:8D:81:FB:B2:F2:3F:FB:3C:39:52
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 12A709AF07C14F1B020F192BFC4167F58072EB45
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8df59b5-30db-48bc-a38c-ab9a670daf3a.roa
Signing time: Tue 14 Oct 2025 16:52:57 +0000
ROA not before: Tue 14 Oct 2025 16:52:57 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.252.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:a7:09:af:07:c1:4f:1b:02:0f:19:2b:fc:41:67:f5:80:72:eb:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 16:52:57 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=694a0b367a057c850b873c26cfda56baa0f3b65aab782fd25716345b464ffe52, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:16:9d:b6:80:89:5f:58:dc:7e:e4:d7:04:43:
2a:29:b9:e7:8c:f3:76:c8:de:a4:18:4d:fa:5a:6c:
83:5f:2b:8f:ca:22:c8:6f:48:1a:62:fc:4d:ab:82:
40:f6:75:2e:17:93:64:10:c8:52:58:a2:26:5a:b5:
39:6f:c8:93:7d:29:f6:e7:d1:51:38:8a:2b:08:2f:
dd:07:aa:31:3f:59:b9:d6:04:c1:32:22:cb:70:59:
9b:fc:08:9f:f1:99:81:2c:08:6d:f0:3d:9c:17:b7:
23:e4:d2:bf:6c:78:8e:87:51:97:eb:c5:b6:aa:f6:
35:bd:cb:20:cc:16:b3:97:3c:95:60:8e:5f:7f:d8:
31:d4:c6:ef:a9:c2:fc:17:8d:c5:27:ea:df:02:43:
fc:44:bc:e8:0b:7a:d8:06:13:52:be:87:4a:98:37:
58:11:65:f7:ac:1e:6c:c4:77:01:1d:f4:8d:28:5f:
5a:92:66:44:9f:c6:b4:5b:6b:e9:47:85:9d:5d:8b:
06:eb:30:11:2f:ad:3c:38:79:f5:bf:23:a5:c1:4f:
07:b2:f1:a4:e4:3a:37:aa:05:ce:9d:b6:36:33:9a:
ae:8b:35:11:97:f8:4b:43:13:54:b9:0d:57:8b:d3:
a1:a5:9d:4f:2e:b2:90:84:0a:f4:14:69:30:7c:a7:
8a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A5:F6:31:78:2C:8F:4F:EF:3A:8D:81:FB:B2:F2:3F:FB:3C:39:52
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8df59b5-30db-48bc-a38c-ab9a670daf3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.252.176.0/24
Signature Algorithm: sha256WithRSAEncryption
05:a1:f8:f7:a4:2b:01:b2:dd:d6:cf:93:c4:00:68:d9:26:5f:
7f:a3:f9:55:fe:fc:9a:ae:a4:41:46:33:fb:33:cc:0c:b2:91:
ee:80:12:b4:aa:f7:38:d1:32:8c:fe:af:58:8c:d0:cd:59:29:
c4:24:88:94:a8:63:fd:bd:98:77:a1:b3:79:ac:ea:01:38:b0:
82:f1:33:09:c1:aa:8f:7c:a7:ad:58:a1:c2:40:ab:76:a9:62:
49:c8:00:86:64:f3:a9:c0:d8:ec:81:8d:19:34:e7:3e:b1:d0:
73:f9:26:87:d5:7d:d3:4f:45:08:04:b4:2a:cd:b1:6e:f9:eb:
20:0b:39:73:7f:0e:7a:84:22:c2:ce:b9:f7:cd:55:ca:83:51:
e8:9a:df:9c:03:93:50:2e:f2:f5:d3:a4:83:43:01:8f:85:20:
17:45:de:13:d5:72:99:a4:29:b8:bf:c9:03:7a:d2:e0:24:f6:
08:97:3e:c0:a2:34:06:f9:79:87:12:63:f7:08:14:c9:98:ec:
63:32:9c:3b:67:e3:fb:f1:6e:13:96:1e:6d:af:66:33:43:a0:
6a:35:78:31:f3:ab:85:e4:ed:44:de:15:88:a4:0b:32:bd:9b:
1f:be:1d:7c:3e:1e:6e:c6:02:25:30:05:d6:83:b2:bf:f4:3a:
bb:4e:74:f9
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUEqcJrwfBTxsCDxkr/EFn9YBy60UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MTY1MjU3WhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A2OTRhMGIzNjdhMDU3Yzg1MGI4NzNjMjZjZmRhNTZiYWEw
ZjNiNjVhYWI3ODJmZDI1NzE2MzQ1YjQ2NGZmZTUyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCiFp22gIlfWNx+5NcEQyopueeM83bI3qQYTfpabINfK4/K
IshvSBpi/E2rgkD2dS4Xk2QQyFJYoiZatTlvyJN9Kfbn0VE4iisIL90HqjE/WbnW
BMEyIstwWZv8CJ/xmYEsCG3wPZwXtyPk0r9seI6HUZfrxbaq9jW9yyDMFrOXPJVg
jl9/2DHUxu+pwvwXjcUn6t8CQ/xEvOgLetgGE1K+h0qYN1gRZfesHmzEdwEd9I0o
X1qSZkSfxrRba+lHhZ1diwbrMBEvrTw4efW/I6XBTwey8aTkOjeqBc6dtjYzmq6L
NRGX+EtDE1S5DVeL06GlnU8uspCECvQUaTB8p4qrAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUHKX2MXgsj0/vOo2B+7LyP/s8OVIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2M4ZGY1OWI1LTMwZGItNDhiYy1hMzhjLWFiOWE2NzBkYWYzYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABA/LAwDQYJKoZIhvcNAQELBQADggEBAAWh+PekKwGy3dbPk8QAaNkmX3+j
+VX+/JqupEFGM/szzAyyke6AErSq9zjRMoz+r1iM0M1ZKcQkiJSoY/29mHehs3ms
6gE4sILxMwnBqo98p61YocJAq3apYknIAIZk86nA2OyBjRk05z6x0HP5JofVfdNP
RQgEtCrNsW756yALOXN/DnqEIsLOuffNVcqDUeia35wDk1Au8vXTpINDAY+FIBdF
3hPVcpmkKbi/yQN60uAk9giXPsCiNAb5eYcSY/cIFMmY7GMynDtn4/vxbhOWHm2v
ZjNDoGo1eDHzq4Xk7UTeFYikCzK9mx++HXw+Hm7GAiUwBdaDsr/0OrtOdPk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:11:15 2025 by rpki-client